Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/65c720ec-188b-3e4a-91ae-a5c0ea7e9f0c.roa
File:                     65c720ec-188b-3e4a-91ae-a5c0ea7e9f0c.roa (raw, json)
Hash identifier:          NX47i1gvRhavRYVCtyGpZxUY5vpSdRsrHJ+FfQl3srs=
Subject key identifier:   C7:8D:3E:A7:32:53:C2:7D:8D:36:E9:E8:CC:6E:30:B2:D7:86:2A:37
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584D2644A594F2EADB72BACCCC80
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/65c720ec-188b-3e4a-91ae-a5c0ea7e9f0c.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     11426
IP address blocks:        2606:f18e::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:a5:94:f2:ea:db:72:ba:cc:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=a96b6134-f897-4a04-afa0-6a27e0347f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bf:4b:47:1c:a4:7c:d3:5c:c5:54:7d:e2:00:
                    51:06:3b:57:7e:c9:90:e9:00:02:69:11:6d:df:3b:
                    06:8c:6f:a4:3c:e5:e3:19:f7:61:70:67:71:36:76:
                    01:fc:01:e1:7f:f2:b3:07:20:bd:8e:5c:e8:65:91:
                    ff:51:cc:6e:76:b7:d1:b0:1c:45:6c:51:1a:8a:be:
                    09:e3:73:7e:2a:53:41:7f:c7:0e:cc:3b:67:8a:65:
                    3f:f1:2e:27:f2:13:39:e9:a6:ef:cc:01:64:f4:b9:
                    03:4e:4f:5b:f3:d4:b9:e8:1d:5c:ed:c9:ef:8a:71:
                    bb:36:f2:bc:5e:ad:70:84:ba:2d:31:34:e7:d5:98:
                    b7:ec:f4:0d:96:7a:e4:99:55:c4:99:b4:b1:f6:da:
                    ba:96:94:4f:35:41:3f:3e:ee:37:a2:bc:a7:6a:21:
                    f0:cd:26:43:f9:6c:64:be:b1:45:3a:b0:89:1d:d4:
                    dd:e6:40:6c:d0:99:fd:32:26:12:5d:3c:fe:4b:07:
                    a1:d6:d0:89:d9:11:9e:6d:a5:11:7a:6d:12:d4:86:
                    b8:11:7a:a8:28:e6:ac:24:62:c6:f4:dc:74:9b:72:
                    62:df:42:af:3f:ab:ab:95:ee:a4:77:b6:26:2d:0a:
                    28:66:63:be:aa:41:09:af:86:d1:93:92:ba:86:ad:
                    76:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8D:3E:A7:32:53:C2:7D:8D:36:E9:E8:CC:6E:30:B2:D7:86:2A:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/65c720ec-188b-3e4a-91ae-a5c0ea7e9f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f18e::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:24:98:29:08:da:b5:2f:9a:21:96:05:fe:e9:20:d5:c4:00:
         d4:a0:85:1c:fe:29:13:27:e1:91:a7:b2:04:3b:95:de:26:19:
         0f:40:08:44:39:77:e4:6d:50:e7:e4:7a:90:eb:10:00:13:d4:
         30:c3:fa:1b:c2:6e:e1:0b:8a:69:e4:69:06:f8:a8:fd:45:94:
         5e:fa:62:e9:8c:e6:7e:03:c7:54:82:f3:36:68:02:6e:30:58:
         fa:74:ac:4d:c9:bb:de:d9:2f:8c:f4:b0:b3:c3:18:af:2c:f9:
         ea:9a:20:c0:ca:8a:9d:60:06:63:13:77:af:33:2f:bd:64:9c:
         b0:cc:d0:de:99:ad:25:9e:ff:80:43:94:eb:8d:16:9e:80:a0:
         66:4a:c9:9e:88:d5:44:94:4f:1a:b4:cd:0a:07:3d:ad:2c:2d:
         ca:78:1c:5c:f9:21:38:0e:c0:9d:5c:23:2c:3a:b2:7b:40:bd:
         02:43:16:39:7c:0b:3a:86:24:43:ef:40:dd:4c:9b:d1:42:3e:
         a8:b4:e1:1c:e3:41:05:2f:fa:71:7a:e3:b3:2c:38:1b:9d:d1:
         35:d8:43:89:af:d5:4c:7e:36:79:91:77:cf:8c:6c:77:cd:84:
         91:fe:2e:56:bf:f4:c4:f7:64:3d:73:ad:6f:68:59:46:0e:af:
         c0:27:9b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:34 2026 by rpki-client